Vulnerability intelligence

CVE-2026-13283

Use after free in AdFilter in Google Chrome on Android prior to 149.0.7827.201 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVSS Score

7.5

High

EPSS — Exploit Probability

0.3%

Riskier than 27% of all CVEs · checked 2026-09-23

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

1 article across 1 outlet · first covered Jun 26, 2026 · latest Jun 26, 2026

Coverage timeline

Chrome patches three high severity flaws, urges swift update
securityonline.info · Jun 26, 2026

Related CVEs — Google

CVE-2026-85046KEV CVE-2026-87491KEV CVE-2026-49881 CVE-2026-58704KEV CVE-2026-93374 CVE-2026-93372 CVE-2026-93377 CVE-2026-93381